#OT Security
Password-Free Login Flaw in Sungrow’s Solar Cloud Platform Could Have Enabled Grid-Wide Disruption
A business-logic flaw in Sungrow's iSolarCloud platform let attackers authenticate into any customer account using only an email address, with no password required and no login alert sent....
Iran’s Cyber Playbook Shifts From Loud Attacks to Patient, Long-Term Access
A new SentinelOne assessment finds Iran-linked hacking groups increasingly favor quiet, persistent access over destructive attacks, planting footholds in cloud accounts, IT suppliers, and industrial systems that could...
CISA Warns: Hackers Are Targeting U.S. Fuel Tank Monitoring Systems Across Critical Infrastructure
CISA, the FBI, NSA, and five other federal agencies have issued a joint advisory confirming active cyberattacks against Automatic Tank Gauge (ATG) systems used in US energy, chemical,...